VIRY.CZ

Logfile of random's system information tool 1.09 (written by random/random)
Run by Administrator at 2011-10-11 17:28:34
Systém Microsoft Windows XP Professional Service Pack 3
System drive C: has 67 GB (88%) free of 76 GB
Total RAM: 1407 MB (65% free)

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 17:29:17, on 11.10.2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Administrator\Data aplikací\28A64\6DA11.exe
C:\Program Files\Internet Explorer\1122\1CA.exe
C:\Program Files\64DE6\lvvm.exe
C:\WINDOWS\system32\ASWLSVC.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe
C:\WINDOWS\system32\ASWL2K.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesApp32.exe
C:\Program Files\Opera\opera.exe
C:\Documents and Settings\Administrator\Plocha\RSIT.exe
C:\Program Files\trend micro\Administrator.exe
C:\WINDOWS\System32\ping.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = http=127.0.0.1:54242
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Odkazy
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O4 - HKLM\..\Run: [1CA.exe] C:\Program Files\Internet Explorer\1122\1CA.exe
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'LOCAL SERVICE')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'NETWORK SERVICE')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe (file missing)
O20 - Winlogon Notify: newasui - C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\newasui.dll
O22 - SharedTaskScheduler: Browseui preloader - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Proces mezipaměti kategorií součástí - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: ASWLSVC - Unknown owner - C:\WINDOWS\system32\ASWLSVC.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: TuneUp Utilities Service (TuneUp.UtilitiesSvc) - TuneUp Software - C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe

--
End of file - 3746 bytes

======Scheduled tasks folder======

C:\WINDOWS\tasks\SunMicro Java Update.job

======Registry dump======

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{18DF081C-E8AD-4283-A596-FA578C2EBDC3}]
Adobe PDF Link Helper - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2011-09-05 63912]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run]
"1CA.exe"=C:\Program Files\Internet Explorer\1122\1CA.exe [2011-10-11 174080]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\AtiExtEvent]
C:\WINDOWS\system32\Ati2evxx.dll [2006-03-08 61440]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\newasui]
C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\newasui.dll [2011-10-10 11264]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\Notify\WgaLogon]
C:\WINDOWS\system32\WgaLogon.dll [2009-03-10 265096]

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"dontdisplaylastusername"=0
"legalnoticecaption"=
"legalnoticetext"=
"shutdownwithoutlogon"=1
"undockwithoutlogon"=1
"EnableLUA"=0

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"NoDriveTypeAutoRun"=145

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\explorer]
"HonorAutoRunSetting"=1

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"C:\Program Files\Opera\opera.exe"="C:\Program Files\Opera\opera.exe:*:Enabled:Opera Internet Browser"
"C:\Program Files\Skype\Phone\Skype.exe"="C:\Program Files\Skype\Phone\Skype.exe:*:Enabled:Skype"
"C:\Program Files\BitTorrent\BitTorrent.exe"="C:\Program Files\BitTorrent\BitTorrent.exe:*:Enabled:BitTorrent"
"C:\Program Files\Microsoft Games\Age of Empires III\age3y.exe"="C:\Program Files\Microsoft Games\Age of Empires III\age3y.exe:*:Enabled:Age of Empires III - The Asian Dynasties"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"
"C:\WINDOWS\TEMP\ubguyx\setup.exe"="C:\WINDOWS\TEMP\ubguyx\setup.exe:*:Enabled:setup"
"\??\C:\WINDOWS\system32\winlogon.exe"="\??\C:\WINDOWS\system32\winlogon.exe:*:Enabled:winlogon"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\domainprofile\authorizedapplications\list]
"%windir%\system32\sessmgr.exe"="%windir%\system32\sessmgr.exe:*:enabled:@xpsp2res.dll,-22019"
"%windir%\Network Diagnostic\xpnetdiag.exe"="%windir%\Network Diagnostic\xpnetdiag.exe:*:Enabled:@xpsp3res.dll,-20000"

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32]
"midimapper"=midimap.dll
"msacm.imaadpcm"=imaadp32.acm
"msacm.msadpcm"=msadp32.acm
"msacm.msg711"=msg711.acm
"msacm.msgsm610"=msgsm32.acm
"msacm.trspch"=tssoft32.acm
"vidc.cvid"=iccvid.dll
"VIDC.I420"=msh263.drv
"vidc.iv31"=ir32_32.dll
"vidc.iv32"=ir32_32.dll
"vidc.iv41"=ir41_32.ax
"VIDC.IYUV"=iyuv_32.dll
"vidc.mrle"=msrle32.dll
"vidc.msvc"=msvidc32.dll
"VIDC.UYVY"=msyuv.dll
"VIDC.YUY2"=msyuv.dll
"VIDC.YVU9"=tsbyuv.dll
"VIDC.YVYU"=msyuv.dll
"wavemapper"=msacm32.drv
"msacm.msg723"=msg723.acm
"vidc.M263"=msh263.drv
"vidc.M261"=msh261.drv
"msacm.msaudio1"=msaud32.acm
"msacm.sl_anet"=sl_anet.acm
"msacm.iac2"=C:\WINDOWS\system32\iac25_32.ax
"vidc.iv50"=ir50_32.dll
"msacm.l3acm"=C:\WINDOWS\system32\l3codeca.acm
"wave"=wdmaud.drv
"midi"=wdmaud.drv
"mixer"=wdmaud.drv
"aux"=wdmaud.drv
"wave1"=wdmaud.drv
"midi1"=wdmaud.drv
"mixer1"=wdmaud.drv
"MSVideo8"=VfWWDM32.dll

======List of files/folders created in the last 1 month======

2011-10-11 17:28:35 ----D---- C:\Program Files\trend micro
2011-10-11 17:28:34 ----D---- C:\rsit
2011-10-11 17:11:12 ----D---- C:\Program Files\64DE6
2011-10-11 16:32:04 ----N---- C:\Documents and Settings\Administrator\Data aplikací\conhostu.exe
2011-10-11 16:28:05 ----D---- C:\Documents and Settings\Administrator\Data aplikací\28A64
2011-10-10 20:00:57 ----A---- C:\Documents and Settings\Administrator\Data aplikací\conhost.exe
2011-10-09 10:38:10 ----D---- C:\WINDOWS\system32\appmgmt
2011-10-08 18:51:35 ----A---- C:\WINDOWS\system32\ptpusb.dll
2011-10-08 18:51:34 ----A---- C:\WINDOWS\system32\drivers\usbscan.sys
2011-10-08 18:51:33 ----A---- C:\WINDOWS\system32\ptpusd.dll
2011-10-06 00:32:05 ----A---- C:\WINDOWS\system32\drivers\USBSTOR.SYS
2011-09-23 12:15:25 ----D---- C:\Documents and Settings\Administrator\Data aplikací\TS3Client
2011-09-18 09:50:16 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Ventrilo
2011-09-13 11:01:15 ----A---- C:\WINDOWS\system32\uxtuneup.dll

======List of files/folders modified in the last 1 month======

2011-10-11 17:28:43 ----D---- C:\WINDOWS\Prefetch
2011-10-11 17:28:35 ----RD---- C:\Program Files
2011-10-11 17:24:29 ----D---- C:\WINDOWS\Temp
2011-10-11 17:24:16 ----D---- C:\WINDOWS
2011-10-11 17:23:24 ----A---- C:\WINDOWS\SchedLgU.Txt
2011-10-11 17:23:12 ----D---- C:\WINDOWS\system32
2011-10-11 17:13:22 ----SD---- C:\WINDOWS\Tasks
2011-10-11 17:10:21 ----D---- C:\Program Files\Internet Explorer
2011-10-11 17:01:04 ----RSD---- C:\WINDOWS\Fonts
2011-10-11 16:26:39 ----D---- C:\WINDOWS\system32\config
2011-10-10 21:32:13 ----D---- C:\WINDOWS\Minidump
2011-10-10 20:00:37 ----D---- C:\WINDOWS\system32\drivers\etc
2011-10-10 17:19:40 ----D---- C:\WINDOWS\Microsoft.NET
2011-10-10 17:19:40 ----D---- C:\WINDOWS\assembly
2011-10-10 14:51:20 ----SHD---- C:\WINDOWS\Installer
2011-10-10 14:48:41 ----D---- C:\WINDOWS\WinSxS
2011-10-10 14:48:39 ----A---- C:\WINDOWS\system32\PerfStringBackup.INI
2011-10-09 11:04:18 ----D---- C:\WINDOWS\system32\inetsrv
2011-10-09 11:02:08 ----D---- C:\WINDOWS\system32\CatRoot2
2011-10-09 10:44:26 ----D---- C:\WINDOWS\Debug
2011-10-09 10:38:10 ----D---- C:\Program Files\Common Files
2011-10-09 10:37:11 ----HD---- C:\Program Files\InstallShield Installation Information
2011-10-08 19:54:29 ----HD---- C:\WINDOWS\inf
2011-10-08 19:54:29 ----D---- C:\WINDOWS\system32\drivers
2011-10-08 18:51:40 ----RSHDC---- C:\WINDOWS\system32\dllcache
2011-10-08 09:43:06 ----D---- C:\Program Files\The KMPlayer
2011-10-02 21:19:43 ----D---- C:\Documents and Settings\Administrator\Data aplikací\Skype
2011-09-28 23:26:39 ----A---- C:\WINDOWS\system32\MRT.exe
2011-09-24 08:28:53 ----HDC---- C:\WINDOWS\$NtUninstallKB2345886$
2011-09-24 08:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2412687$
2011-09-24 08:28:52 ----HDC---- C:\WINDOWS\$NtUninstallKB2378111_WM9$
2011-09-24 08:28:51 ----HDC---- C:\WINDOWS\$NtUninstallKB2423089$
2011-09-24 08:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2524375$
2011-09-24 08:28:50 ----HDC---- C:\WINDOWS\$NtUninstallKB2508429$
2011-09-24 08:28:49 ----HDC---- C:\WINDOWS\$NtUninstallKB2555917$
2011-09-24 08:28:48 ----HDC---- C:\WINDOWS\$NtUninstallKB2567680$
2011-09-24 08:28:45 ----HDC---- C:\WINDOWS\$NtUninstallKB951376-v2_0$
2011-09-24 08:28:42 ----HDC---- C:\WINDOWS\$NtUninstallKB954155_WM9$
2011-09-24 08:28:39 ----HDC---- C:\WINDOWS\$NtUninstallKB956844_0$
2011-09-24 08:28:38 ----HDC---- C:\WINDOWS\$NtUninstallKB958869$
2011-09-24 08:28:36 ----HDC---- C:\WINDOWS\$NtUninstallKB960803_0$
2011-09-24 08:28:34 ----HDC---- C:\WINDOWS\$NtUninstallKB960859_0$
2011-09-24 08:28:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971737_0$
2011-09-24 08:28:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971657_0$
2011-09-24 08:28:31 ----HDC---- C:\WINDOWS\$NtUninstallKB971468_0$
2011-09-24 08:28:30 ----HDC---- C:\WINDOWS\$NtUninstallKB973540_WM9L$
2011-09-24 08:28:29 ----HDC---- C:\WINDOWS\$NtUninstallKB974112_0$
2011-09-24 08:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB979402_WM9L$
2011-09-24 08:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978695_WM9$
2011-09-24 08:28:24 ----HDC---- C:\WINDOWS\$NtUninstallKB978601_0$
2011-09-24 08:28:23 ----HDC---- C:\WINDOWS\$NtUninstallKB979559_0$
2011-09-24 08:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981350$
2011-09-24 08:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB981322$
2011-09-24 08:28:20 ----HDC---- C:\WINDOWS\$NtUninstallKB980436$
2011-09-24 08:28:19 ----HDC---- C:\WINDOWS\$NtUninstallKB982132$
2011-09-24 08:24:55 ----D---- C:\Documents and Settings\Administrator\Data aplikací\BitTorrent
2011-09-23 12:15:09 ----D---- C:\Program Files\Common Files\Microsoft Shared
2011-09-14 23:14:32 ----HD---- C:\WINDOWS\$hf_mig$
2011-09-13 11:01:27 ----D---- C:\Program Files\TuneUp Utilities 2011

======List of drivers (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R0 risdptsk;risdptsk; C:\WINDOWS\system32\DRIVERS\risdptsk.sys [2005-07-14 27904]
R1 dtsoftbus01;DAEMON Tools Virtual Bus Driver; C:\WINDOWS\system32\DRIVERS\dtsoftbus01.sys [2011-08-29 232512]
R1 intelppm;Řadič procesoru Intel; C:\WINDOWS\system32\DRIVERS\intelppm.sys [2008-04-14 40192]
R1 kbdhid;Ovladač klávesnice standardu HID; C:\WINDOWS\system32\DRIVERS\kbdhid.sys [2008-04-14 14592]
R1 Tosrfcom;Bluetooth RFCOMM from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfcom.sys [2005-08-01 64896]
R2 irda;Protokol IrDA; C:\WINDOWS\system32\DRIVERS\irda.sys [2008-04-13 88192]
R2 MDC8021X;AEGIS Protocol (IEEE 802.1x) v2.3.1.9; C:\WINDOWS\system32\DRIVERS\mdc8021x.sys [2011-08-29 15781]
R3 ASNDIS5;ASNDIS5 Protocol Driver; \??\C:\WINDOWS\system32\ASNDIS5.SYS []
R3 ati2mtag;ati2mtag; C:\WINDOWS\system32\DRIVERS\ati2mtag.sys [2006-03-08 1506816]
R3 HDAudBus;Ovladač Microsoft UAA pro sběrnici High Definition Audio; C:\WINDOWS\system32\DRIVERS\HDAudBus.sys [2008-04-13 144384]
R3 hidusb;Ovladač třídy standardu HID; C:\WINDOWS\system32\DRIVERS\hidusb.sys [2008-04-13 10368]
R3 IntcAzAudAddService;Service for Realtek HD Audio (WDM); C:\WINDOWS\system32\drivers\RtkHDAud.sys [2006-11-15 4225920]
R3 irsir;Microsoft Serial Infrared Driver; C:\WINDOWS\system32\DRIVERS\irsir.sys [2001-08-17 18688]
R3 mouhid;Ovladač myši standardu HID; C:\WINDOWS\system32\DRIVERS\mouhid.sys [2001-10-25 12160]
R3 MTsensor;ATK0100 ACPI UTILITY; C:\WINDOWS\system32\DRIVERS\ATKACPI.sys [2005-02-17 5632]
R3 Rasirda;WAN Miniport (IrDA); C:\WINDOWS\system32\DRIVERS\rasirda.sys [2001-08-17 19584]
R3 rimsptsk;rimsptsk; C:\WINDOWS\system32\DRIVERS\rimsptsk.sys [2005-07-12 51328]
R3 RTL8023xp;Realtek 10/100/1000 NIC Family all in one NDIS XP Driver; C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys [2006-01-18 80512]
R3 smserial;smserial; C:\WINDOWS\system32\DRIVERS\smserial.sys [2006-01-20 862340]
R3 SynMini;USB2.0 1.3M WebCam; C:\WINDOWS\System32\Drivers\SynMini.sys [2006-07-03 1056512]
R3 SynScan;USB2.0 1.3M WebCam Still Image; C:\WINDOWS\System32\Drivers\SynScan.sys [2006-06-30 8064]
R3 SynTP;Synaptics TouchPad Driver; C:\WINDOWS\system32\DRIVERS\SynTP.sys [2005-10-21 191936]
R3 tosporte;Bluetooth Port Driver from Toshiba; C:\WINDOWS\system32\DRIVERS\tosporte.sys [2005-11-24 47104]
R3 Tosrfbd;Bluetooth RFBUS from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbd.sys [2006-02-02 108928]
R3 Tosrfbnp;Bluetooth RFBNEP from TOSHIBA; C:\WINDOWS\System32\Drivers\tosrfbnp.sys [2005-12-14 37632]
R3 Tosrfhid;Bluetooth RFHID from TOSHIBA; C:\WINDOWS\system32\DRIVERS\Tosrfhid.sys [2006-02-08 62848]
R3 Tosrfusb;Bluetooth USB Controller; C:\WINDOWS\System32\Drivers\tosrfusb.sys [2006-02-24 40192]
R3 TuneUpUtilitiesDrv;TuneUpUtilitiesDrv; \??\C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesDriver32.sys []
R3 usbccgp;Obecný nadřazený ovladač Microsoft USB; C:\WINDOWS\system32\DRIVERS\usbccgp.sys [2008-04-13 32128]
S3 BCM43XX;ASUS 802.11 ovladač síťového adaptéru; C:\WINDOWS\system32\DRIVERS\bcmwl5.sys [2005-02-11 371712]
S3 CCDECODE;Dekodér Closed Caption; C:\WINDOWS\system32\DRIVERS\CCDECODE.sys [2008-04-13 17024]
S3 hamachi;Hamachi Network Interface; C:\WINDOWS\system32\DRIVERS\hamachi.sys [2009-03-18 26176]
S3 MSTEE;Microsoft Streaming Tee/Sink-to-Sink Converter; C:\WINDOWS\system32\drivers\MSTEE.sys [2008-04-13 5504]
S3 NABTSFEC;NABTS/FEC VBI Codec; C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys [2008-04-13 85248]
S3 NdisIP;Microsoft TV/Video Connection; C:\WINDOWS\system32\DRIVERS\NdisIP.sys [2008-04-13 10880]
S3 rtl8139;Realtek RTL8139(A/B/C)-based PCI Fast Ethernet Adapter NT Driver; C:\WINDOWS\system32\DRIVERS\RTL8139.SYS [2004-08-04 20992]
S3 sdbus;sdbus; C:\WINDOWS\system32\DRIVERS\sdbus.sys [2008-04-13 79232]
S3 SLIP;BDA Slip De-Framer; C:\WINDOWS\system32\DRIVERS\SLIP.sys [2008-04-13 11136]
S3 streamip;BDA IPSink; C:\WINDOWS\system32\DRIVERS\StreamIP.sys [2008-04-13 15232]
S3 toshidpt;TOSHIBA Bluetooth HID port driver; C:\WINDOWS\system32\drivers\Toshidpt.sys [2005-07-11 3712]
S3 tosrfnds;Bluetooth Personal Area Network from TOSHIBA; C:\WINDOWS\system32\DRIVERS\tosrfnds.sys [2005-01-06 18612]
S3 TosRfSnd;Bluetooth Audio Device (WDM) from TOSHIBA; C:\WINDOWS\system32\drivers\TosRfSnd.sys [2005-11-11 52864]
S3 usbscan;Ovladač skeneru USB; C:\WINDOWS\system32\DRIVERS\usbscan.sys [2008-04-13 15104]
S3 USBSTOR;Ovladač velkokapacitního paměťového zařízení USB; C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS [2008-04-13 26368]
S3 WSTCODEC;Dálnopisný kodek světového standardu; C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS [2008-04-13 19200]

======List of services (R=Running, S=Stopped, 0=Boot, 1=System, 2=Auto, 3=Demand, 4=Disabled)======

R2 ASWLSVC;ASWLSVC; C:\WINDOWS\system32\ASWLSVC.exe [2004-05-06 496640]
R2 Ati HotKey Poller;Ati HotKey Poller; C:\WINDOWS\system32\Ati2evxx.exe [2006-03-08 405504]
R2 Irmon;Sledování infračerveného přenosu; C:\WINDOWS\system32\svchost.exe [2008-04-14 14336]
R2 TuneUp.UtilitiesSvc;TuneUp Utilities Service; C:\Program Files\TuneUp Utilities 2011\TuneUpUtilitiesService32.exe [2011-09-01 1526080]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
S3 aspnet_state;ASP.NET State Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe [2010-03-18 35160]
S3 IDriverT;InstallDriver Table Manager; C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [2005-04-04 69632]
S3 NetTcpPortSharing;Net.Tcp Port Sharing Service; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe [2010-03-18 124240]
S3 UxTuneUp;TuneUp Theme Extension; C:\WINDOWS\System32\svchost.exe [2008-04-14 14336]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0; C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [2010-03-18 753504]

-----------------EOF-----------------

Zdravím, bohužel to není čisté

Stáhni si : ComboFix
a ulož ho na plochu.
(návod na použití: http://www.bleepingcomputer.com/combofi ... t-combofix)
Ukonči všechna aktivní okna,vypni Antispy a Antivir a spusť ho.
- Po spuštění se zobrazí podmínky užití, potvrď je stiskem tlačítka Ano
- Dále postupuj dle pokynů, během aplikování ComboFixu neklikej do zobrazujícího se okna a nic nespouštěj
- Po dokončení skenování by měl program vytvořit log - C:\ComboFix.txt - zkopíruj sem prosím celý jeho obsah
Kdyby ti po použití ComboFixu systém nenaběhl - při restartu F8 a poslední známá funkční konfigurace

Při procházení fázemi mi vyskočí modrá obrazovka a je po srandě...

Zkus v nouzovém režimu

Tak jsem se nakonec rozhodl, že rovnou reinstaluju OS...
Každopádně děkuji. Můžu jen vědět, co za sajrajt tam bylo? Viděl jsem tam nějaké trojan agenty...

Přeinstalace je ve tvém případě asi nejrychlejší řešení - ne každý uživatel je toho schopen

Podezřelými byly hlavně tyto řádky:
C:\Documents and Settings\Administrator\Data aplikací\28A64\6DA11.exe
C:\Program Files\Internet Explorer\1122\1CA.exe
C:\Program Files\64DE6\lvvm.exe
O20 - Winlogon Notify: newasui - C:\Documents and Settings\NetworkService\Local Settings\Data aplikací\newasui.dll
"C:\WINDOWS\TEMP\ubguyx\setup.exe"="C:\WINDOWS\TEMP\ubguyx\setup.exe:*:Enabled:setup"
a našlo by se asi více, bližší info si zkus vygooglit.

Nemáš zač, moc jsme spolu nevyřešili, ale příště to můžeš zase zkusit, budeme tady

Já už OS reinstaloval mnohokrát, takže jak píšeš - většinou nejrychlejší řešení...Spíš jsem hned na úvod čekal otázku: "kde je antivir?" - jeden myslel... Takže se mi dole zase točí oranžovej šmejd (avast)
No tak třeba někdy příště

taky se mi točí pomeranč - snad dobrá volba.

A nemusíš chodit moc brzy